CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.04)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in Plack::App::Prerender before version 0.3.0 for Perl allows proxying to an arbitrary host via unvalidated REQUEST_URI concatenation. When the rewrite base is a plain string, the REQUEST_URI is appended without checking if the path starts with a forward slash. An attacker can change the host by sending a request starting with '@', enabling access to internal or restricted hosts.
In JetBrains TeamCity before versions 2026.1.3 and 2025.11.7, unauthenticated remote code execution is possible via the agent polling protocol.
An input validation vulnerability exists in an API component of the Arista orchestrator. An authenticated user can manipulate backend queries, leading to unauthorized data access and unintended outbound network connections.
phpMyFAQ before version 4.1.6 contains a remote code execution vulnerability in the configuration API. An authenticated administrator with CONFIGURATION_EDIT and ATTACHMENT_ADD privileges can manipulate the upgrade.lastDownloadedPackage setting to write arbitrary PHP files and achieve code execution as the web server user.
SiYuan desktop before version 3.7.2 contains a reflected cross-site scripting vulnerability in the bazaar plugin readme handler. An attacker can craft a malicious siyuan:// deep link that, when clicked, executes arbitrary JavaScript with full Node.js access via insertAdjacentHTML in an insecurely configured Electron renderer.
VeloCloud Orchestrator (VCO) on-prem has a vulnerability that allows a remote attacker to access privileged internal functionality, impacting the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and managed data. This issue is actively exploited.
SQL injection vulnerability in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1. Unsanitized user input passed to the CodeIgniter Query Builder's order_by method allows time-based queries and schema enumeration. Under certain MySQL configurations, it may lead to remote code execution via writing a PHP shell using INTO OUTFILE.
The AWP Classifieds plugin for WordPress version 4.4.7 and earlier contains an unauthenticated SQL injection vulnerability.
The rtMedia plugin for WordPress, BuddyPress, and bbPress version 4.7.10 and earlier contains an unauthenticated SQL injection vulnerability.
The GamiPress plugin for WordPress version 7.9.7 and earlier contains an unauthenticated SQL injection vulnerability.
The Relevanssi Light plugin version 1.2.2 and earlier contains an SQL injection vulnerability exploitable by an unauthenticated attacker.
The MapSVG plugin version 8.14.0 and earlier contains an SQL injection vulnerability exploitable by an unauthenticated attacker.
Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1. The hardcoded secret allowed attackers to forge the mail from address of forms.
Joomla extension SP Page Builder before version 6.8.0 contains an unauthenticated SQL injection vulnerability. Improper validation of catid parameters in the loadMoreArticles endpoint allows an attacker to execute SQL queries.
The SP Page Builder extension for Joomla versions below 6.7.1 contains an unauthenticated SQL injection vulnerability in the Dynamic Content endpoint due to improper validation of the order parameter.
vBulletin versions 5.x through 5.7.5 and 6.x through 6.2.1 contain an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method, allowing unauthenticated remote attackers to execute arbitrary PHP code via crafted pagenav[pagenumber] parameter.
Improper validation of specified quantity in input and out-of-bounds read in Apache Thrift C++ bindings. Affects versions before 0.24.0.
A vulnerability in Apache Thrift c_glib bindings before version 0.24.0 causes an out-of-bounds read, potentially leading to data disclosure or crash.
Apache Thrift versions before 0.24.0 contain a heap-based buffer overflow vulnerability in the C++ bindings, potentially leading to crashes or remote code execution.
Apache Thrift versions before 0.24.0 contain a certificate validation vulnerability with host mismatch in the c_glib bindings, potentially enabling man-in-the-middle attacks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS